Extracted

• • Target

    IRS_Covid-19_Relief_Payment_Notice_pdf.exe

  • Size

    84KB

  • MD5

    5525bb8a978d3ac15812c8d8ca9b8a57

  • SHA1

    dcb9549ff9c290e056f83639ad546b03206a0806

  • SHA256

    21f49ea6e105c22882a9fb0065803deee18eddb76767a30ddade2e2725eb65d9

  • SHA512

    0e5504ee2fc22ce87c1cac663e0c4cd76227025da20c2903d63ddafc0fc8a270d56a90b89c31d8ee448a61f881ace27037beb623f4409b9d1020a6b2a0a9f35b

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2